Skip to content
This repository has been archived by the owner on Dec 1, 2024. It is now read-only.
/ WinAPI Public archive

REST API and Web server based on .NET HttpListener and backend PowerShell Core for Windows remote managment via Web browser or curl from Linux

License

Notifications You must be signed in to change notification settings

Lifailon/WinAPI

Folders and files

NameName
Last commit message
Last commit date

Latest commit

Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 
Β 

Repository files navigation

WinAPI

πŸ“ Publication on Habr

πŸ”Ž Test version: README

REST API and Web server on base .NET HttpListener and backend only PowerShell Core (except for Web endpoints where minimal HTML, CSS, and JavaScript are used). Using WinAPI, you can quickly set up remote communication with Windows OS using API, without the need to configure WinRM or OpenSSH and get control from any platform, including Linux via browser or any REST client.

πŸ”— Implemented:

🍿 The server functionality is implemented in the Kinozal-Bot project.

🐧 Since the server is built on .NET, this implementation is cross-platform, you can try managing Linux services from a Windows system: dotNET-Systemd-API.

➑️ πŸš€ Install

➑️ πŸ“Š Examples

πŸŽ‰ Web server

Image alt

  • Process management:

Image alt

  • Service management:

Image alt

  • Hardware statistics:

Image alt

  • Physical and logical disk statistics, metrics IOps, SMART (via embedded module Storage 2.0) and current network stats.

To give you an example, a file download from the Internet was taking place on a remote machine:

Image alt

  • Sensors from LibreHardwareMonitor:

Image alt

πŸ“„ Viewing and filtering Windows events

Image alt

πŸ“š Implemented endpoints

All GET requests can be output in one of the following formats: JSON (default), HTML, XML, CSV. When using a browser for GET requests, by default the response is processed in table format using HTML markup.

  • GET

/api/service - Get list all services
/apt/service/service_name - Get list service by the specified name passed in URL (using wildcard format)
/apt/process - Get a list all running processes in an easy-to-read format (includes CPU and IOps performance)
/apt/process/process_name - Get list running processes by the specified name passed in URL (using wildcard format)
/api/files - Get a list of files and directories at the specified path in the Path header with the size, number of child files and directories, date of creation, access and modification

  • GET metrics from WMI/CIMv2 (Common Information Model)

/api/hardware - Output of summary statistics of metrics close to Task Manager
/api/performance - Output metrics from Counter
/api/cpu - CPU use to procent for all core and total
/api/memory - Memory use to GB and procent
/api/memory/slots - Number of memory slots and their frequency
/api/disk/physical - List of all physical disks, model, size, operation status and errors
/api/disk/logical - List of all logical disks, model and size
/api/disk/partition - List partitions of all physical disks
/api/disk/smart - Temperature, health status, power on hours, start and stop cycle count
/api/disk/iops - Read and write speed, queue, Input and Output operations per second for all physical disks
/api/video - List of all video adapters, video memory size and resolution
/api/network - List of all network adapters and their settings
api/network/ipconfig - Settings for all network interfaces
api/network/stat - Network connection statistics (ports)
api/network/interface/stat/current - Current statistics of the active network interface (formatted dat)
api/network/interface/stat/total - General statistics of the active network interface since system boot (raw data)
/api/update - Windows update list
/api/software - Installed software list
/api/driver - Unique driver list

  • GET metrics from Open Hardware Monitor via WMI/CIM

/api/sensor - Summary table of all sensors

Source module: PowerShellHardwareMonitor (module installation is not required)

  • Web

HTTP server. Endpoints only via Web Browser.

/service - Checking status, starting and stopping services
/process - Characteristics as well as starting and stopping processes
/events/list - List of all Windows event providers
/events/<Event_Name> - List of all events of the selected log with the ability to filter by content

πŸ’‘ Use the text entry form to filter messages through the browser

  • POST

/apt/service/<Service_Name> - Stop, start and restart services by name (only one at a time, not wildcard format), status is transmitted in the request header (Status: <Stop/Start/Restart>). Upon execution, the service status is returned in the format of a GET request.
/apt/process/<Process_Name> - Check the number of running processes (Status: Check), stop a process by name (Status: Stop) and start a process (Status: Start). To start a process, you can use the function to search for an executable file in the file system by its name, but you can also pass the path to the executable file through the request header (e.g. Path: C:\Program Files\qBittorrent\qbittorrent.exe).
/api/file-delete - Deleting the file or directory specified in the header Path one at a time

To find an executable file, the Find-Process function is used to scan the following directories:

"C:\Program Files",
"C:\Program Files (x86)",
"C:\Users\<UserName>\AppData\Roaming",
"C:\Users\<UserName>\Documents"

πŸš€ Install

Use in PowerShell Core.

Use the NuGet package manager:

Install-Module ps.win.api -Repository NuGet -AllowClobber

πŸ’‘ You must have a NuGet repository registered:

Register-PSRepository -Name "NuGet" -SourceLocation "https://www.nuget.org/api/v2" -InstallationPolicy Trusted

You can use this command to install a module (includes the server part) from the GitHub repository:

Invoke-Expression(New-Object Net.WebClient).DownloadString("https://raw.githubusercontent.com/Lifailon/WinAPI/rsa/WinAPI/Deploy/deploy-module-ps.win.api.ps1")

Wait for the command output: Completed

To find out where the module is installed, use the command:

> $(Get-Module ps.win.api).Path
C:\Users\lifailon\Documents\PowerShell\Modules\ps.win.api\0.4.3\ps.win.api.psm1

You can configure port, login and password for connect to the server in the configuration file WinAPI.ini, which is located in the directory with the module:

port         = 8443
user         = rest
pass         = api

Open the specified port on your firewall:

New-NetFirewallRule -DisplayName "WinAPI" -Profile Any -Direction Inbound -Action Allow -Protocol TCP -LocalPort 8443

Use the following commands to start and check the operation status server: Start-WinAPI and Test-WinAPI

> Start-WinAPI
> Test-WinAPI

Port Status
---- ------
8443 Open

To stop the server: Stop-WinAPI

> Stop-WinAPI
> Test-WinAPI

Port Status
---- ------
8443 Closed

Each call to the endpoint is logged to the WinAPI.log file. You can disable logging:

Log_File    = True

Or output the current log in the console (tail mode):

> Read-WinAPI
06.02.2024 04:41:58 Start server
06.02.2024 04:41:58 192.168.3.99:18447 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 => GET / => 200
06.02.2024 04:43:45 Start server
06.02.2024 04:43:55 192.168.3.99:19107 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 => GET /process => 200
06.02.2024 04:43:56 192.168.3.99:19107 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/121.0.0.0 Safari/537.36 => GET /service => 200
...

Specify the data source for the /api/sensor endpoint (default: LibreHardwareMonitor):

SensorSource = OpenHardwareMonitor

πŸ’‘ For the endpoint to work, you must download the portable version of the LibreHardwareMonitor (Default) or OpenHardwareMonitor program in path C:\Users\<UserName>\Documents\LibreHardwareMonitor and C:\Users\<UserName>\Documents\OpenHardwareMonitor\OpenHardwareMonitor.

For a quick installation LibreHardwareMonitor, use this command in your terminal:

Invoke-Expression(New-Object Net.WebClient).DownloadString("https://raw.githubusercontent.com/Lifailon/PowerShell.HardwareMonitor/rsa/Install/Install-LibreHardwareMonitor.ps1")

Install OpenHardwareMonitor:

Invoke-Expression(New-Object Net.WebClient).DownloadString("https://raw.githubusercontent.com/Lifailon/PowerShell.HardwareMonitor/rsa/Install/Install-OpenHardwareMonitor.ps1")

There are other ways to start the server, but they are not supported since version 0.4 and the advent the module.

  • Running service (added in version 0.3.1)

πŸ’‘ For reason unknown to me, the service doesn't process all the code on startup (doesn't create an ini file and hangs at POST request to stop the process).

To install the server part as a service (used NSSM), download scripts to automatically deployument, start, stop and remove.

  • Running executable (added in version 0.3.0)

πŸ’‘ PowerShell 5.1 acts as the default handler (limitations of the ps2exe module), which prevents all endpoints from working correctly

There are two options for launching using an executable file (build script).

winapi-console.exe - process startup in a window with logging output of connections to the server

winapi-process.exe - background process startup

To stop the background process, use the command: Get-Process *winapi* | Stop-Process

πŸ“‘ Module

Module for server management (starting and stopping background process) and interaction with remote server. The module implements most of the functions used in the server part to run on a local computer and receive the same information from a remote computer via WinAPI.

> Import-Module ps.win.api
> Get-command -Module ps.win.api

CommandType     Name                             Version    Source
-----------     ----                             -------    ------
Function        Find-Process                     0.4.3      WinAPI
Function        Get-CPU                          0.4.3      WinAPI
Function        Get-DiskLogical                  0.4.3      WinAPI
Function        Get-DiskPartition                0.4.3      WinAPI
Function        Get-DiskPhysical                 0.4.3      WinAPI
Function        Get-Driver                       0.4.3      WinAPI
Function        Get-Event                        0.4.3      WinAPI
Function        Get-Files                        0.4.3      WinAPI
Function        Get-Hardware                     0.4.3      WinAPI
Function        Get-HardwareNoJob                0.4.3      WinAPI
Function        Get-IOps                         0.4.3      WinAPI
Function        Get-MemorySize                   0.4.3      WinAPI
Function        Get-MemorySlots                  0.4.3      WinAPI
Function        Get-NetInterfaceStat             0.4.3      WinAPI
Function        Get-NetIpConfig                  0.4.3      WinAPI
Function        Get-NetStat                      0.4.3      WinAPI
Function        Get-Performance                  0.4.3      WinAPI
Function        Get-ProcessPerformance           0.4.3      WinAPI
Function        Get-Smart                        0.4.3      WinAPI
Function        Get-Software                     0.4.3      WinAPI
Function        Get-VideoCard                    0.4.3      WinAPI
Function        Get-WinUpdate                    0.4.3      WinAPI
Function        Read-WinAPI                      0.4.3      WinAPI
Function        Start-WinAPI                     0.4.3      WinAPI
Function        Stop-WinAPI                      0.4.3      WinAPI
Function        Test-WinAPI                      0.4.3      WinAPI

The format is always the same, if you don't use the ComputerName parameter, the function runs locally on your computer. If you use the ComputerName parameter, we access the desired endpoint and get a response from the WinAPI server.

Example:

> Get-DiskPhysical | Format-Table

Model                         Size   PartitionCount Interface Status ConfigManagerErrorCode LastErrorCode
-----                         ----   -------------- --------- ------ ---------------------- -------------
WD PC SN740 SDDPNQD-1T00-1027 954 Gb              4 SCSI      OK                          0

> Get-DiskPhysical -ComputerName 192.168.3.100 -Port 8443 -User rest -Pass api | Format-Table

Model                  Size    PartitionCount Interface Status ConfigManagerErrorCode LastErrorCode
-----                  ----    -------------- --------- ------ ---------------------- -------------
ST1000DM003-1CH162     932 Gb               1 IDE       OK                          0
WDC WD2005FBYZ-01YCBB2 1863 Gb              1 IDE       OK                          0
MSI M390 250GB         233 Gb               3 SCSI      OK                          0

πŸ’‘ The Get-Hardware function uses the ThreadJob module, the script provides automatic installation in case of its absence. This is the only function which execution time was reduced by half due to threads (on average 3.3 seconds versus 1.4 seconds).

Image alt

πŸ”’ Authorization

Base authorization has been implemented (based on Base64).

Default login and password:

$user = "rest"
$pass = "api"
  • Example 1.
$SecureString = ConvertTo-SecureString $pass -AsPlainText -Force
$Credential = New-Object System.Management.Automation.PSCredential($user, $SecureString)
Invoke-RestMethod -Credential $Credential -AllowUnencryptedAuthentication -Uri http://192.168.3.99:8443/api/service
  • Example 2.
$EncodingCred = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes("${user}:${pass}"))
$Headers = @{"Authorization" = "Basic ${EncodingCred}"}
Invoke-RestMethod -Headers $Headers -Uri http://192.168.3.99:8443/api/service
  • Example 3. cURL client. Receiving data in different formats.
user="rest"
pass="api"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service | jq  -r '.[] | {data: "\(.Name) - \(.Status)"} | .data'
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/win
curl -s -X GET -u $user:$pass -H 'Content-Type: application/json' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass -H 'Content-Type: application/html' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass -H 'Content-Type: application/xml' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass -H 'Content-Type: application/csv' http://192.168.3.99:8443/api/service/winrm
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/process
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/process/torrent

It is possible to configure filtering by IP address or subnet. It is possible to configure other authentication methods to HttpListener.

πŸ“’ Response code

200. Request completed successfully.

400. Bad Request. Invalid header and service or process could not be found.

401. Unauthorized. Login or password is invalid.

404. Not found endpoint. Response to the lack of endpoints.

405. Method not allowed. Response to other methods.

⚠️ Operational stability

Processing of simultaneous requests from several clients (managed to test three simultaneous connections).

If the previous request has not been processed yet and a new request from the same client arrives, the server terminates with an error, this behavior was detected in the browser when quickly refreshing pages, to handle this event is implemented automatic restart of the server. For Web-client such restart is processed without error and in the process of page refresh the response of the last request is returned.

In Invoke-RestMethod and curl, interrupting the previous request and sending a new one to another endpoint works without error and the response of the last request is returned (taking into account the processing time of the previous one).

🐧 Examples POST request from Linux client

  • Stop and start service WinRM:

First find the service to pass its full name to the to url for POST request (example, using part of the name in GET request).

user="rest"
pass="api"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/win | jq -r .[].Name
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/service/winrm -H "Status: Stop"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/service/winrm -H "Status: Start"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/winrm | jq -r .Status
  • Stop and start process qBittorrent:

First find the process by its name in wilcard format using a GET request. Using Check in the Status header, we display the number of running processes. To stop the process, use header Status: Stop. To run the process, two examples are given using the name to find the executable and the second option, specify the full path to the executable.

user="rest"
pass="api"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/process/torrent
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Check"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Stop"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Start"
  • Stop and start process Plex Media Server:

If the service in the name contains spaces, pass the name in the url request using the underscore (_) delimiter.

user="rest"
pass="api"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/plex_media_server -H "Status: Stop"
curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/plex_media_server -H "Status: Start" -H "Path: C:\Program Files\Plex\Plex Media Server\Plex Media Server.exe"
  • Delete file

First, we look through the parent directories and look for the required file. In the Path header we pass the FullName of the desired file (or directory).

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon"
curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E23.1080p.rus.LostFilm.TV.mkv"
curl -s -X POST -u $user:$pass -data '' http://192.168.3.99:8443/api/file-delete -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E23.1080p.rus.LostFilm.TV.mkv"

πŸ”Œ Windows client

$user = "rest"
$pass = "api"
$EncodingCred = [System.Convert]::ToBase64String([System.Text.Encoding]::UTF8.GetBytes("${user}:${pass}"))
  • Stop service WinRM:
$Headers = @{"Authorization" = "Basic ${EncodingCred}"}
$Headers += @{"Status" = "Stop"}
Invoke-RestMethod -Headers $Headers -Uri http://192.168.3.99:8443/api/service/winrm
Invoke-RestMethod -Headers $Headers -Method Post -Uri http://192.168.3.99:8443/api/service/winrm
  • Start service WinRM:
$Headers = @{"Authorization" = "Basic ${EncodingCred}"}
$Headers += @{"Status" = "Start"}
Invoke-RestMethod -Headers $Headers -Method Post -Uri http://192.168.3.99:8443/api/service/winrm

πŸ“¬ Change data type

Examples:

user=rest
pass=api

curl -s -X GET -u $user:$pass -H 'Content-Type: application/json' http://192.168.3.99:8443/api/service/win | jq
[
  {
    "Name": "WinAPI",
    "DisplayName": "WinAPI",
    "Status": "Stopped",
    "StartType": "Manual"
  },
  {
    "Name": "WinDefend",
    "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° антивирусной ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΡ‹ Microsoft Defender",
    "Status": "Running",
    "StartType": "Automatic"
  },
  {
    "Name": "WinHttpAutoProxySvc",
    "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° автоматичСского обнаруТСния Π²Π΅Π±-прокси WinHTTP",
    "Status": "Running",
    "StartType": "Manual"
  },
  {
    "Name": "Winmgmt",
    "DisplayName": "Π˜Π½ΡΡ‚Ρ€ΡƒΠΌΠ΅Π½Ρ‚Π°Ρ€ΠΈΠΉ управлСния Windows",
    "Status": "Running",
    "StartType": "Automatic"
  },
  {
    "Name": "WinRM",
    "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ управлСния Windows (WS-Management)",
    "Status": "Stopped",
    "StartType": "Manual"
  }
]

curl -s -X GET -u $user:$pass -H 'Content-Type: application/xml' http://192.168.3.99:8443/api/service/winrm | xq
<?xml version="1.0" encoding="utf-8"?>
<Objects>
  <Object Type="System.Management.Automation.PSCustomObject">
    <Property Name="Name" Type="System.String">WinRM</Property>
    <Property Name="DisplayName" Type="System.String">Π‘Π»ΡƒΠΆΠ±Π° ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ управлСния Windows (WS-Management)</Property>
    <Property Name="Status" Type="System.String">Stopped</Property>
    <Property Name="StartType" Type="System.String">Manual</Property>
  </Object>
</Objects>

curl -s -X GET -u $user:$pass -H 'Content-Type: application/csv' http://192.168.3.99:8443/api/service/winrm
"Name","DisplayName","Status","StartType" "WinRM","Π‘Π»ΡƒΠΆΠ±Π° ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ управлСния Windows (WS-Management)","Stopped","Manual"

curl -s -X GET -u $user:$pass -H 'Content-Type: application/html' http://192.168.3.99:8443/api/service/winrm
<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"  "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd"> <html xmlns="http://www.w3.org/1999/xhtml"> <head> <title>HTML TABLE</title> </head><body> <table> <colgroup><col/><col/><col/><col/></colgroup> <tr><th>Name</th><th>DisplayName</th><th>Status</th><th>StartType</th></tr> <tr><td>WinRM</td><td>Π‘Π»ΡƒΠΆΠ±Π° ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ управлСния Windows (WS-Management)</td><td>Stopped</td><td>Manual</td></tr> </table> </body></html>

πŸ“Š Output data examples

Service management

lifailon@hv-devops-01:~$ user="rest"
lifailon@hv-devops-01:~$ pass="api"

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/service/win

[
  {
    "Name": "WinDefend",
    "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° антивирусной ΠΏΡ€ΠΎΠ³Ρ€Π°ΠΌΠΌΡ‹ Microsoft Defender",
    "Status": "Running",
    "StartType": "Automatic"
  },
  {
    "Name": "WinHttpAutoProxySvc",
    "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° автоматичСского обнаруТСния Π²Π΅Π±-прокси WinHTTP",
    "Status": "Running",
    "StartType": "Manual"
  },
  {
    "Name": "Winmgmt",
    "DisplayName": "Π˜Π½ΡΡ‚Ρ€ΡƒΠΌΠ΅Π½Ρ‚Π°Ρ€ΠΈΠΉ управлСния Windows",
    "Status": "Running",
    "StartType": "Automatic"
  },
  {
    "Name": "WinRM",
    "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ управлСния Windows (WS-Management)",
    "Status": "Stopped",
    "StartType": "Manual"
  }
]

curl -s -X GET -u $user:$pass -H 'Content-Type: application/json' http://192.168.3.99:8443/api/service/winrm

{
  "Name": "WinRM",
  "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ управлСния Windows (WS-Management)",
  "Status": "Stopped",
  "StartType": "Manual"
}

curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/service/winrm -H "Status: Start"

{
  "Name": "winrm",
  "DisplayName": "Π‘Π»ΡƒΠΆΠ±Π° ΡƒΠ΄Π°Π»Π΅Π½Π½ΠΎΠ³ΠΎ управлСния Windows (WS-Management)",
  "Status": "Running",
  "StartType": "Manual"
}

Process management

curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Check"

Number active qbittorrent processes: 0

curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Start"

Number active qbittorrent processes: 1

curl -s -u $user:$pass http://192.168.3.99:8443/api/process/qbittorrent

{
  "Name": "qbittorrent",
  "ProcTime": "0 %",
  "IOps": 3,
  "IObsRead": "1,84 Mb",
  "IObsWrite": "0,00 Mb",
  "RunTime": "06:57:59",
  "TotalTime": "00:01:42",
  "UserTime": "00:01:09",
  "PrivTime": "00:00:33",
  "WorkingSet": "323,29 Mb",
  "PeakWorkingSet": "366,97 Mb",
  "PageMemory": "965,08 Mb",
  "Threads": 25,
  "Handles": 623,
  "Path": "C:\\Program Files\\qBittorrent\\qbittorrent.exe",
  "Company": "The qBittorrent Project",
  "Version": "v4.6.0"
}

curl -s -X POST -u $user:$pass --data '' http://192.168.3.99:8443/api/process/qbittorrent -H "Status: Stop"

Number active qbittorrent processes: 0

Hardware metrics (general summary, performance, cpu, memory and video)

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/hardware

{
  "Host": "HUAWEI-BOOK",
  "Uptime": "17:17",
  "BootDate": "01.02.2024 09:05:04",
  "Owner": "lifailon",
  "OS": "ΠœΠ°ΠΉΠΊΡ€ΠΎΡΠΎΡ„Ρ‚ Windows 10 Pro",
  "Motherboard": "HUAWEI MRGF-XX-PCB M1010",
  "Processor": "12th Gen Intel(R) Core(TM) i7-1260P",
  "Core": 12,
  "Thread": 16,
  "CPU": "14 %",
  "ProcessCount": 305,
  "ThreadsCount": 4641,
  "HandlesCount": 157065,
  "MemoryAll": "16 GB",
  "MemoryUse": "11,00 GB",
  "MemoryUseProc": "70 %",
  "WorkingSet": "11,06 GB",
  "PageMemory": "12,54 GB",
  "MemorySlots": 8,
  "PhysicalDiskCount": 1,
  "PhysicalDiskAllSize": "954 Gb",
  "LogicalDiskCount": 3,
  "LogicalDiskAllSize": "1053 Gb",
  "DiskTotalTime": "2 %",
  "DiskTotalIOps": 3,
  "DiskTotalRead": "0,015 MByte/Sec",
  "DiskTotalWrite": "0,000 MByte/Sec",
  "VideoCardCount": 3,
  "VideoCardAllSize": "1 Gb",
  "NetworkAdapterEnableCount": 3,
  "NetworkReceivedCurrent": "0,154 MByte/Sec",
  "NetworkSentCurrent": "0,044 MByte/Sec",
  "NetworkReceivedTotal": "4,13 GByte",
  "NetworkSentTotal": "0,34 GByte",
  "PortListenCount": 50,
  "PortEstablishedCount": 54
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/performance

{
  "CPUTotalTime": "1 %",
  "MemoryUse": "30 %",
  "DiskTotalTime": "12 %",
  "AdapterName": "intel[r] wi-fi 6e ax211 160mhz",
  "AdapterSpeed": "0,093 MByte/Sec"
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/cpu

[
  {
    "Name": "0",
    "ProcessorTime": "8 %",
    "PrivilegedTime": "6 %",
    "UserTime": "6 %",
    "InterruptTime": "0 %",
    "IdleTime": "79 %"
  },
  {
    "Name": "1",
    "ProcessorTime": "0 %",
    "PrivilegedTime": "0 %",
    "UserTime": "0 %",
    "InterruptTime": "0 %",
    "IdleTime": "99 %"
  },
  {
    "Name": "2",
    "ProcessorTime": "2 %",
    "PrivilegedTime": "0 %",
    "UserTime": "6 %",
    "InterruptTime": "0 %",
    "IdleTime": "98 %"
  },
  {
    "Name": "3",
    "ProcessorTime": "8 %",
    "PrivilegedTime": "18 %",
    "UserTime": "0 %",
    "InterruptTime": "0 %",
    "IdleTime": "76 %"
  },
  {
    "Name": "4",
    "ProcessorTime": "0 %",
    "PrivilegedTime": "0 %",
    "UserTime": "0 %",
    "InterruptTime": "0 %",
    "IdleTime": "99 %"
  },
  {
    "Name": "5",
    "ProcessorTime": "8 %",
    "PrivilegedTime": "18 %",
    "UserTime": "0 %",
    "InterruptTime": "0 %",
    "IdleTime": "76 %"
  },
  {
    "Name": "6",
    "ProcessorTime": "0 %",
    "PrivilegedTime": "0 %",
    "UserTime": "0 %",
    "InterruptTime": "0 %",
    "IdleTime": "100 %"
  },
  {
    "Name": "7",
    "ProcessorTime": "8 %",
    "PrivilegedTime": "18 %",
    "UserTime": "0 %",
    "InterruptTime": "0 %",
    "IdleTime": "76 %"
  },
  {
    "Name": "8",
    "ProcessorTime": "14 %",
    "PrivilegedTime": "12 %",
    "UserTime": "6 %",
    "InterruptTime": "0 %",
    "IdleTime": "68 %"
  },
  {
    "Name": "9",
    "ProcessorTime": "33 %",
    "PrivilegedTime": "18 %",
    "UserTime": "18 %",
    "InterruptTime": "0 %",
    "IdleTime": "60 %"
  },
  {
    "Name": "10",
    "ProcessorTime": "27 %",
    "PrivilegedTime": "12 %",
    "UserTime": "18 %",
    "InterruptTime": "0 %",
    "IdleTime": "68 %"
  },
  {
    "Name": "11",
    "ProcessorTime": "27 %",
    "PrivilegedTime": "18 %",
    "UserTime": "12 %",
    "InterruptTime": "0 %",
    "IdleTime": "62 %"
  },
  {
    "Name": "12",
    "ProcessorTime": "27 %",
    "PrivilegedTime": "6 %",
    "UserTime": "24 %",
    "InterruptTime": "0 %",
    "IdleTime": "71 %"
  },
  {
    "Name": "13",
    "ProcessorTime": "14 %",
    "PrivilegedTime": "12 %",
    "UserTime": "6 %",
    "InterruptTime": "0 %",
    "IdleTime": "76 %"
  },
  {
    "Name": "14",
    "ProcessorTime": "21 %",
    "PrivilegedTime": "18 %",
    "UserTime": "6 %",
    "InterruptTime": "0 %",
    "IdleTime": "69 %"
  },
  {
    "Name": "15",
    "ProcessorTime": "0 %",
    "PrivilegedTime": "0 %",
    "UserTime": "0 %",
    "InterruptTime": "0 %",
    "IdleTime": "94 %"
  },
  {
    "Name": "_Total",
    "ProcessorTime": "11 %",
    "PrivilegedTime": "9 %",
    "UserTime": "6 %",
    "InterruptTime": "0 %",
    "IdleTime": "80 %"
  }
]

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/memory

{
  "MemoryAll": "15,73 GB",
  "MemoryUse": "10,98 GB",
  "MemoryUseProc": "70 %",
  "PageSize": "48,00 GB",
  "PageUse": "7,92 GB",
  "PageUseProc": "17 %",
  "PagePath": "D:\\pagefile.sys",
  "MemoryVirtAll": "63,73 GB",
  "MemoryVirtUse": "18,90 GB",
  "MemoryVirtUseProc": "30 %",
  "ProcWorkingSet": "11,02 GB",
  "ProcPageMemory": "12,62 GB"
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/memory/slots

[
  {
    "Tag": "Physical Memory 0",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller0-ChannelA",
    "Bank": "BANK 0"
  },
  {
    "Tag": "Physical Memory 1",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller0-ChannelB",
    "Bank": "BANK 1"
  },
  {
    "Tag": "Physical Memory 2",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller0-ChannelC",
    "Bank": "BANK 2"
  },
  {
    "Tag": "Physical Memory 3",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller0-ChannelD",
    "Bank": "BANK 3"
  },
  {
    "Tag": "Physical Memory 4",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller1-ChannelA",
    "Bank": "BANK 0"
  },
  {
    "Tag": "Physical Memory 5",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller1-ChannelB",
    "Bank": "BANK 1"
  },
  {
    "Tag": "Physical Memory 6",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller1-ChannelC",
    "Bank": "BANK 2"
  },
  {
    "Tag": "Physical Memory 7",
    "Model": "5200 Mhz  ",
    "Size": "2048 Mb",
    "Device": "Controller1-ChannelD",
    "Bank": "BANK 3"
  }
]

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/video

[
  {
    "Model": "Intel(R) Iris(R) Xe Graphics",
    "Display": "3120x2080",
    "VideoRAM": "1 Gb"
  },
  {
    "Model": "Virtual Display Device",
    "Display": "3840x2560",
    "VideoRAM": "0 Gb"
  },
  {
    "Model": "Citrix Indirect Display Adapter",
    "Display": "x",
    "VideoRAM": "0 Gb"
  }
]

Disk metrics (Physical, Logical, SMART and IOps)

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/physical

{
  "Model": "WD PC SN740 SDDPNQD-1T00-1027",
  "Size": "954 Gb",
  "PartitionCount": 4,
  "Interface": "SCSI",
  "Status": "OK",
  "ConfigManagerErrorCode": 0,
  "LastErrorCode": null
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/logical

[
  {
    "Logical_Disk": "C:",
    "FileSystem": "NTFS",
    "VolumeName": "",
    "AllSize": "153 Gb",
    "FreeSize": "44 Gb",
    "Free": "29 %"
  },
  {
    "Logical_Disk": "D:",
    "FileSystem": "NTFS",
    "VolumeName": "",
    "AllSize": "800 Gb",
    "FreeSize": "413 Gb",
    "Free": "52 %"
  },
  {
    "Logical_Disk": "G:",
    "FileSystem": "FAT32",
    "VolumeName": "Google Drive",
    "AllSize": "100 Gb",
    "FreeSize": "42 Gb",
    "Free": "42 %"
  }
]

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/iops

[
  {
    "Name": "0 D: C:",
    "ReadWriteTime": "0 %",
    "ReadTime": "0 %",
    "WriteTime": "0 %",
    "IdleTime": "99 %",
    "QueueLength": 0,
    "BytesPersec": "0,000 MByte/Sec",
    "ReadBytesPersec": "0,000 MByte/Sec",
    "WriteBytesPersec": "0,000 MByte/Sec",
    "IOps": 0,
    "ReadsIOps": 0,
    "WriteIOps": 0
  },
  {
    "Name": "_Total",
    "ReadWriteTime": "0 %",
    "ReadTime": "0 %",
    "WriteTime": "0 %",
    "IdleTime": "99 %",
    "QueueLength": 0,
    "BytesPersec": "0,000 MByte/Sec",
    "ReadBytesPersec": "0,000 MByte/Sec",
    "WriteBytesPersec": "0,000 MByte/Sec",
    "IOps": 0,
    "ReadsIOps": 0,
    "WriteIOps": 0
  }
]

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/disk/smart

{
  "DiskName": "WD PC SN740 SDDPNQD-1T00-1027",
  "Temperature": 61,
  "HealthStatus": "Healthy",
  "OperationalStatus": "OK",
  "MediaType": "SSD",
  "BusType": "NVMe",
  "PowerOnHours": null,
  "StartStopCycleCount": null
}

Network interface stats

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/interface/stat/current

{
  "Name": "Intel[R] Wi-Fi 6E AX211 160MHz",
  "Total": "0,087 MByte/Sec",
  "Received": "0,063 MByte/Sec",
  "Sent": "0,024 MByte/Sec",
  "PacketsPersec": 416,
  "PacketsReceivedPersec": 189,
  "PacketsReceivedUnicastPersec": 189,
  "PacketsReceivedNonUnicastPersec": 0,
  "PacketsReceivedDiscarded": 0,
  "PacketsReceivedErrors": 0,
  "PacketsSentPersec": 226,
  "PacketsSentUnicastPersec": 226,
  "PacketsSentNonUnicastPersec": 0
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/interface/stat/total

{
  "Name": "Intel[R] Wi-Fi 6E AX211 160MHz",
  "Total": "4,73 GByte",
  "Received": "4,36 GByte",
  "Sent": "0,37 GByte",
  "PacketsPersec": 9163133,
  "PacketsReceivedPersec": 5580358,
  "PacketsReceivedUnicastPersec": 5540535,
  "PacketsReceivedNonUnicastPersec": 39823,
  "PacketsReceivedDiscarded": 0,
  "PacketsReceivedErrors": 0,
  "PacketsSentPersec": 3582775,
  "PacketsSentUnicastPersec": 3572843,
  "PacketsSentNonUnicastPersec": 9932
}

Network stats and IP configuration

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/stat | jq .[-1]

{
  "ProcessName": "svchost",
  "LocalAddress": "0.0.0.0",
  "LocalPort": 135,
  "RemotePort": 0,
  "RemoteHostName": "",
  "RemoteAddress": "0.0.0.0",
  "State": 2,
  "CreationTime": "2024-02-03T01:08:07+03:00",
  "RunTime": "3.16:47:13",
  "ProcessPath": "C:\\Windows\\system32\\svchost.exe"
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/network/ipconfig | jq .[-1]

{
  "Description": "Hyper-V Virtual Ethernet Adapter #2",
  "IPAddress": "172.22.48.1 fe80::1637:f6c9:59b9:dc6f",
  "GatewayDefault": "",
  "Subnet": "255.255.240.0 64",
  "DNSServer": "",
  "MACAddress": "00:15:5D:CB:0C:CD",
  "DHCPEnabled": false,
  "DHCPServer": null,
  "DHCPLeaseObtained": null,
  "DHCPLeaseExpires": null
}

Driver, software and Windows update

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/driver | jq .[-1]

{
  "DriverProviderName": "WireGuard LLC",
  "FriendlyName": "ProtonVPN Tunnel",
  "Description": "Wintun Userspace Tunnel",
  "DriverVersion": "0.13.0.0",
  "DriverDate": "2021-02-08T03:00:00+03:00"
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/software | jq .[-2]

{
  "Name": "ILSpy",
  "Version": "8.0.0.7345",
  "Vendor": "ICSharpCode Team",
  "InstallDate": "16.10.2023",
  "InstallLocation": null,
  "InstallSource": "D:\\Install\\IDE\\.NET\\",
  "PackageName": "ILSpy-8.0.0.7345.msi",
  "LocalPackage": "C:\\Windows\\Installer\\21787.msi"
}

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/update | jq .[0]

{
  "HotFixID": "KB5033918",
  "InstallDate": "13.01.2024",
  "Description": "Update",
  "InstalledBy": "NT AUTHORITY\\Π‘Π˜Π‘Π’Π•ΠœΠ"
}

File system

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies"

[
  {
    "Name": "ΠœΠ”Π–-03",
    "FullName": "D:\\Movies\\ΠœΠ”Π–-03",
    "Type": "Directory",
    "Size": "14.243 GB",
    "Files": 9,
    "Directory": 0,
    "CreationTime": "25.10.2023 03:58:41",
    "LastAccessTime": "02.02.2024 02:45:19",
    "LastWriteTime": "25.10.2023 04:05:22"
  },
  {
    "Name": "Adventure-Time",
    "FullName": "D:\\Movies\\Adventure-Time",
    "Type": "Directory",
    "Size": "61.73 GB",
    "Files": 292,
    "Directory": 11,
    "CreationTime": "04.05.2023 10:05:23",
    "LastAccessTime": "02.02.2024 02:45:19",
    "LastWriteTime": "04.05.2023 10:06:22"
  },
  {
    "Name": "Prikluchenie-Dsheki-Chana",
    "FullName": "D:\\Movies\\Prikluchenie-Dsheki-Chana",
    "Type": "Directory",
    "Size": "22.862 GB",
    "Files": 95,
    "Directory": 0,
    "CreationTime": "10.07.2023 10:00:55",
    "LastAccessTime": "02.02.2024 02:45:19",
    "LastWriteTime": "10.07.2023 10:03:28"
  },
  {
    "Name": "Shaman-King",
    "FullName": "D:\\Movies\\Shaman-King",
    "Type": "Directory",
    "Size": "15.123 GB",
    "Files": 64,
    "Directory": 0,
    "CreationTime": "10.07.2023 10:03:10",
    "LastAccessTime": "02.02.2024 02:45:19",
    "LastWriteTime": "10.07.2023 10:07:01"
  },
  {
    "Name": "The-Cleaner-S02",
    "FullName": "D:\\Movies\\The-Cleaner-S02",
    "Type": "Directory",
    "Size": "7.829 GB",
    "Files": 6,
    "Directory": 0,
    "CreationTime": "25.10.2023 03:47:32",
    "LastAccessTime": "02.02.2024 02:45:19",
    "LastWriteTime": "25.10.2023 03:51:10"
  },
  {
    "Name": "The-Flash",
    "FullName": "D:\\Movies\\The-Flash",
    "Type": "Directory",
    "Size": "76.569 GB",
    "Files": 43,
    "Directory": 2,
    "CreationTime": "30.07.2023 01:13:20",
    "LastAccessTime": "02.02.2024 02:45:06",
    "LastWriteTime": "30.07.2023 03:22:09"
  }
]

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash"

There are 20 files in the season 4 directory:

[
  {
    "Name": "3 sezon",
    "FullName": "D:\\Movies\\The-Flash\\3 sezon",
    "Type": "Directory",
    "Size": "41.01 GB",
    "Files": 23,
    "Directory": 0,
    "CreationTime": "30.07.2023 01:13:20",
    "LastAccessTime": "02.02.2024 02:08:32",
    "LastWriteTime": "30.07.2023 01:14:37"
  },
  {
    "Name": "4 sezon",
    "FullName": "D:\\Movies\\The-Flash\\4 sezon",
    "Type": "Directory",
    "Size": "35.559 GB",
    "Files": 20,
    "Directory": 0,
    "CreationTime": "30.07.2023 01:22:15",
    "LastAccessTime": "02.02.2024 02:08:32",
    "LastWriteTime": "18.12.2023 12:00:37"
  }
]

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv"

{
  "Name": "The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv",
  "FullName": "D:\\Movies\\The-Flash\\4 sezon\\The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv",
  "Type": "File",
  "Size": "1.786 GB",
  "Files": 0,
  "Directory": 0,
  "CreationTime": "30.07.2023 03:06:02",
  "LastAccessTime": "17.12.2023 11:45:02",
  "LastWriteTime": "30.07.2023 03:07:19"
}

❌ We're deleting episode 20 of the serial:

curl -s -X POST -u $user:$pass -data '' http://192.168.3.99:8443/api/file-delete -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv"

Deleted successfully: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv (File).

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash/4 sezon/The.Flash.S04E20.1080p.rus.LostFilm.TV.mkv"

Bad Request. Path  could not be found.

curl -s -X GET -u $user:$pass http://192.168.3.99:8443/api/files -H "Path: D:/Movies/The-Flash"

There are now 19 files in the Season 4 catalog:

[
  {
    "Name": "3 sezon",
    "FullName": "D:\\Movies\\The-Flash\\3 sezon",
    "Type": "Directory",
    "Size": "41.01 GB",
    "Files": 23,
    "Directory": 0,
    "CreationTime": "30.07.2023 01:13:20",
    "LastAccessTime": "02.02.2024 02:45:06",
    "LastWriteTime": "30.07.2023 01:14:37"
  },
  {
    "Name": "4 sezon",
    "FullName": "D:\\Movies\\The-Flash\\4 sezon",
    "Type": "Directory",
    "Size": "33.773 GB",
    "Files": 19,
    "Directory": 0,
    "CreationTime": "30.07.2023 01:22:15",
    "LastAccessTime": "02.02.2024 02:45:06",
    "LastWriteTime": "18.12.2023 12:00:37"
  }
]

πŸ“‘ Server log

Example of logging different clients: Google Chrome, PowerShell (Invoke-RestMethod) and curl.

PS C:\Users\lifailon\Documents\Git\WinAPI> . 'C:\Users\lifailon\Documents\Git\WinAPI\WinAPI\WinAPI-0.3.ps1'
Running on port 8443
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET / => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/service/WinRM => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/service/WinRM => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /service => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/process/qbittorrent => 200
192.168.3.99:49829 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/process/ => 405
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => POST /api/process/qbittorrent => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /process => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/hardware => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/performance => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/performance => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/cpu => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/memory => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/physical => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/logical => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/disk/iops => 200
192.168.3.99:49843 Mozilla/5.0 (Windows NT 10.0; Win64; x64) AppleWebKit/537.36 (KHTML, like Gecko) Chrome/120.0.0.0 Safari/537.36 => GET /api/video => 200
192.168.3.100:55137 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => GET /api/service => 200
192.168.3.100:55147 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => POST /api/service/winrm => 200
192.168.3.100:55152 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => POST /api/service/winrm => 200
192.168.3.100:55175 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => GET /api/service => 200
192.168.3.100:55181 Mozilla/5.0 (Windows NT 10.0; Microsoft Windows 10.0.19045; ru-RU) PowerShell/7.3.7 => POST /api/service/winrm => 200
192.168.3.101:44112 curl/7.81.0 => GET /api/service/win => 200
192.168.3.101:44120 curl/7.81.0 => GET /api/service/winrm => 200
192.168.3.101:39642 curl/7.81.0 => POST /api/process/qbittorrent => 200
192.168.3.101:46296 curl/7.81.0 => POST /api/process/qbittorrent => 200